Risk Management of Information Security – Information Security FMEA Circle  

Oleh:

Lotto, Kim Hung LAI ; CHIN, Kwai Sang ; Albert, H.C. TSANG

Jenis: Article from Proceeding
Dalam koleksi: ANQ Congress 19-22 October 2010 New Delhi, page 1-11.
Topik: Risk Management; Information Security; FMEA; Info-Secure FMEA Circle
Fulltext: Lotto__HKSQ_Risk_Management.pdf (230.57KB)

Isi artikel

Risk management is recognized as an integral part of good management practice. An effective risk management system is an essential tool in ISO 27001 Information Security Management System (ISMS). In this paper, different risk management approaches including AS/NZS 4360:1999, Institute of Risk Management (2002), ISO/IEC 27005:2008, BS 31100:2008 and ISO 31000:2009 were reviewed. Moreover, some scholar’s suggestions on information security risk management were also discussed. After considering the selection criteria of risk assessment tools, Failure Mode and Effects Analysis (FMEA) was chosen for ISO 27001 implementation. Information Security FMEA Circle (Info-Secure FMEA Circle) was developed to support the risk management framework by modifying traditional FMEA methodologies

Opini Anda

Klik untuk menuliskan opini Anda tentang koleksi ini!

Kembali